How do I provide access to my Atlassian cloud products for a managed account?

[Mike Bell]

I have a bunch of standard User accounts that I have been testing Atlassian cloud with successfully. We are now moving on to the next stage which is managing our user accounts vis OKTA for Atlassian cloud. Everything I've read up to this point says these managed accounts will only show up in the managed accounts section of the directory. This is seemingly not true. 

For example, john.doe@acme.com shows in both the managed accounts and the standard users as well. Everything works fine with this setup, but (like the docs I reads stated it should only show up in the managed accounts section) so I suspended the account from the Users section. The account still exists in the managed account section, but it has no Atlassian products associated with it any longer and I am unable to add any to this managed account.

So my question is this... Do I need to have the email account in both the managed account section and the Users section in the directory for this to work properly? If not, where do I assign Products to an account that ONLY exists in the managed accounts section?

Thank you for your time.

Mike

[Rebekka Heilmann _viadee_ · Accepted solution]

I checked our Atlassian Org and found, that it tends to be technical or deactivated Accounts, that appear in managed but not in Users.

The Users Tab show only Accounts that already have access to at least one product. Managed Accounts are all Atlassian Accounts that use your claimed domain. (If you ticked "claim all Accounts" as well, otherwise it's only Accounts in your domain you added)

Can you add the managed accounts into groups? Product access is managed by giving groups access and then adding users to them.
That works for all but one account I've tested in our org.

[Mike Bell]

When I claimed the email domain accounts I did not do "claim all". I need to do this in sections so I only did a partial claim. The accounts that I claimed show up in the managed accounts section, but also still show in the Users section as well. 

If I remove the user account from the User section it still remains in the Managed Users section, so it now only shows up once. At this point I cannot assign the Managed user account to a Product and nor do these Managed accounts show up when I try to add them to a group.

What I found that does work is if the user account exists in both the Users section and the Managed Users section. The Managed User will show "No Product Access". I then go to either Groups or Products and assign that user access, click back to the Managed User section and the Managed User now shows access to the Product.

This is certainly not working the way the documentation read it would. Any help would be greatly appreciated.

[Rebekka Heilmann _viadee_]

According to several other posts in this community, assigning products only works per user invite for Managed Accounts: Solved: Can't add product to managed account (atlassian.com)

That's if they don't have product access to begin with. I think we solved that issue by AD groups -> all our users are in one of three synched groups, all get Confluence User access. Therefore they already appear in "user" section and can get further product access the easy way.